CVE Browser
CVE-2026-61823 HIGH
code16 Sharp vulnerable to stored XSS via iframe srcdoc Attribute
CVSS 7.3 EPSS 0.21% Sep 24, 2026
CVE-2026-61825 HIGH
code16/sharp has a stored XSS via data-html-content Sanitizer Bypass
CVSS 8.7 EPSS 0.22% Sep 24, 2026
CVE-2026-44692 HIGH
Authenticated Sharp users can download unrelated Laravel Storage objects through the generic download endpoint
CVSS 7.7 EPSS 0.36% Jun 10, 2026
CVE-2026-53634 MEDIUM
Sharp: Missing Authorization Check in Quick Creation Command Endpoints
CVSS 4.3 EPSS 0.37% Jun 10, 2026
CVE-2026-33686 HIGH
Sharp is Vulnerable to Path Traversal via Unsanitized Extension in FileUtil
CVSS 8.8 EPSS 0.57% Mar 26, 2026
CVE-2026-33687 HIGH
Sharp has Unrestricted File Upload via Client-Controlled Validation Rules
CVSS 8.8 EPSS 0.69% Mar 26, 2026
CVE-2025-62798 MEDIUM
Sharp user-provided input can be evaluated in a SharpShowTextField with Vue template syntax
CVSS 5.4 EPSS 0.22% Oct 28, 2025
Showing 1 to 7 CVEs · page 1